$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1088385455558230017/0/CCA3BB73899F78334CA03D6DA4D8FD3F94D69BB9.mft File: CCA3BB73899F78334CA03D6DA4D8FD3F94D69BB9.mft (raw, json) Hash identifier: eO/kauVshKCJPm1JqyetKnD0mQ7Pl38e0ZaXDB5x5CY= Subject key identifier: D8:6B:50:4E:6F:69:55:DF:0C:B6:FD:0A:03:51:15:95:84:53:A8:EF Authority key identifier: CC:A3:BB:73:89:9F:78:33:4C:A0:3D:6D:A4:D8:FD:3F:94:D6:9B:B9 Certificate issuer: /CN=CCA3BB73899F78334CA03D6DA4D8FD3F94D69BB9 Certificate serial: 48068BB35ED039FFD7B033E706ED0503063B65B2 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CCA3BB73899F78334CA03D6DA4D8FD3F94D69BB9.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1088385455558230017/0/CCA3BB73899F78334CA03D6DA4D8FD3F94D69BB9.mft Manifest number: 70 Signing time: Sun 14 Jun 2026 00:12:28 +0000 Manifest this update: Sun 14 Jun 2026 00:07:28 +0000 Manifest next update: Mon 15 Jun 2026 03:15:28 +0000 Files and hashes: 1: CCA3BB73899F78334CA03D6DA4D8FD3F94D69BB9.crl (hash: kj4kqNcWxPuZWFXlLfaIBq84jW5fDFSsFm7psPStr1c=) 2: 3130332e3137372e3136322e302f32332d3234203d3e20313439303537.roa (hash: jgtfx24D6pLUOGIrP0FsDFNvF8xIgwwrZ2kQ0C7L36A=) 3: 3136332e35332e35322e302f32322d3234203d3e203531383437.roa (hash: QuYF2uZ6IZ+l3FPWrOqcXWtoS7S46LuH4kJESx2x1Qs=) 4: 3136332e35332e35322e302f32322d3234203d3e20313439303537.roa (hash: uICx57p5+jtBkGMOR0tDJ+Anre9HEKQERsFBp0N7f88=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1088385455558230017/0/CCA3BB73899F78334CA03D6DA4D8FD3F94D69BB9.crl rsync://rpki-rps.cnnic.cn/repo/A1088385455558230017/0/CCA3BB73899F78334CA03D6DA4D8FD3F94D69BB9.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CCA3BB73899F78334CA03D6DA4D8FD3F94D69BB9.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 16:02:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:06:8b:b3:5e:d0:39:ff:d7:b0:33:e7:06:ed:05:03:06:3b:65:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CCA3BB73899F78334CA03D6DA4D8FD3F94D69BB9 Validity Not Before: Jun 14 00:07:28 2026 GMT Not After : Jun 15 03:15:28 2026 GMT Subject: CN=D86B504E6F6955DF0CB6FD0A035115958453A8EF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:a1:29:94:23:75:8f:93:90:0b:fa:d0:26:21: 34:de:49:cf:48:5d:30:a7:c5:11:a0:74:36:6c:28: 6b:ce:35:7d:19:16:ea:7c:95:bd:d2:86:e8:a0:06: e1:57:d8:ab:56:37:fc:ce:d3:77:3f:c2:f7:c5:fc: 96:e2:e9:9c:f7:a3:60:dc:e0:0a:31:48:b3:37:e2: c2:52:e5:14:0f:d4:18:d6:3b:0a:be:3f:9c:25:dc: f8:d3:5b:ec:e7:e8:76:48:8c:f1:50:fc:ec:ec:6d: fa:04:01:ab:43:b6:ad:d0:d9:1a:50:00:9a:09:59: 6e:b8:76:98:ed:9b:d6:73:ad:5b:2c:14:0d:aa:4c: 35:69:9e:72:ca:ab:33:ca:10:00:72:75:ce:13:f7: 39:c6:7b:d6:d7:99:3b:92:53:0d:7f:3b:37:90:e7: 63:7d:a4:32:76:7d:f8:0d:0b:56:a3:4e:c4:b6:21: 76:25:14:31:46:5d:77:ff:7a:c7:b7:b7:17:3f:33: 6e:f3:69:93:72:f1:2f:37:ef:cf:a6:82:d7:4a:22: ca:6b:61:9e:86:31:bc:83:7a:70:6b:da:2f:a8:d9: e1:2e:a0:03:2f:02:6f:f2:7c:c4:7d:b5:a6:01:c2: 9c:70:c5:00:48:b7:f3:32:2b:2a:e8:d4:c4:a2:3c: 53:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:6B:50:4E:6F:69:55:DF:0C:B6:FD:0A:03:51:15:95:84:53:A8:EF X509v3 Authority Key Identifier: keyid:CC:A3:BB:73:89:9F:78:33:4C:A0:3D:6D:A4:D8:FD:3F:94:D6:9B:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1088385455558230017/0/CCA3BB73899F78334CA03D6DA4D8FD3F94D69BB9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CCA3BB73899F78334CA03D6DA4D8FD3F94D69BB9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1088385455558230017/0/CCA3BB73899F78334CA03D6DA4D8FD3F94D69BB9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:56:09:13:be:e6:91:96:60:0c:68:da:9d:08:fc:3b:9d:f7: d8:a8:df:b4:3a:03:3a:ab:7a:a5:3d:ea:78:ba:88:1d:2f:af: 75:2e:07:7f:c2:55:d1:7a:2b:11:5c:7d:02:db:e1:a4:0c:96: 89:89:b2:3b:57:92:65:26:5d:6a:7d:28:d3:c9:87:54:ba:8e: ff:40:36:d0:f2:86:47:a9:e8:f9:3b:fc:b4:1e:a9:1f:e5:38: c9:5f:d2:12:2d:d6:95:61:a2:7d:a0:b8:9a:56:c4:49:ec:3b: 35:c7:8f:a5:61:10:7b:9f:72:ec:5e:5d:53:b9:5c:74:53:9c: 07:f5:aa:26:0e:99:56:bd:3f:63:45:23:a4:f1:f8:6b:9a:78: 37:f0:e1:b3:8b:34:96:6e:f6:0e:35:d1:2f:e9:6b:41:6c:de: f7:50:a5:fd:40:52:f5:0e:0f:38:11:5f:2f:55:ed:c9:7f:ab: 1d:f2:19:d2:27:59:bf:76:84:0d:f5:30:7c:34:2b:31:0f:c5: b8:41:a2:f8:f0:cc:69:ca:83:a0:e5:fd:df:c7:73:52:04:3e: 21:bc:82:cc:68:97:14:c1:32:9a:de:17:30:38:fb:af:a4:a8: d6:cf:e3:26:ef:2c:09:06:10:bc:c5:19:b3:90:d3:ba:01:ea: 9e:6a:63:97 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUSAaLs17QOf/XsDPnBu0FAwY7ZbIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0NBM0JCNzM4OTlGNzgzMzRDQTAzRDZEQTREOEZEM0Y5 NEQ2OUJCOTAeFw0yNjA2MTQwMDA3MjhaFw0yNjA2MTUwMzE1MjhaMDMxMTAvBgNV BAMTKEQ4NkI1MDRFNkY2OTU1REYwQ0I2RkQwQTAzNTExNTk1ODQ1M0E4RUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmoSmUI3WPk5AL+tAmITTeSc9I XTCnxRGgdDZsKGvONX0ZFup8lb3ShuigBuFX2KtWN/zO03c/wvfF/Jbi6Zz3o2Dc 4AoxSLM34sJS5RQP1BjWOwq+P5wl3PjTW+zn6HZIjPFQ/OzsbfoEAatDtq3Q2RpQ AJoJWW64dpjtm9ZzrVssFA2qTDVpnnLKqzPKEABydc4T9znGe9bXmTuSUw1/OzeQ 52N9pDJ2ffgNC1ajTsS2IXYlFDFGXXf/ese3txc/M27zaZNy8S8378+mgtdKIspr YZ6GMbyDenBr2i+o2eEuoAMvAm/yfMR9taYBwpxwxQBIt/MyKyro1MSiPFP/AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU2GtQTm9pVd8Mtv0KA1EVlYRTqO8wHwYDVR0j BBgwFoAUzKO7c4mfeDNMoD1tpNj9P5TWm7kwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA4 ODM4NTQ1NTU1ODIzMDAxNy8wL0NDQTNCQjczODk5Rjc4MzM0Q0EwM0Q2REE0RDhG RDNGOTRENjlCQjkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0NBM0JCNzM4OTlGNzgzMzRDQTAzRDZEQTREOEZEM0Y5NEQ2OUJCOS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwODgzODU0NTU1NTgyMzAwMTcvMC9DQ0EzQkI3Mzg5OUY3 ODMzNENBMDNENkRBNEQ4RkQzRjk0RDY5QkI5Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi1YJE77mkZZg DGjanQj8O5332KjftDoDOqt6pT3qeLqIHS+vdS4Hf8JV0XorEVx9AtvhpAyWiYmy O1eSZSZdan0o08mHVLqO/0A20PKGR6no+Tv8tB6pH+U4yV/SEi3WlWGifaC4mlbE Sew7NcePpWEQe59y7F5dU7lcdFOcB/WqJg6ZVr0/Y0UjpPH4a5p4N/Dhs4s0lm72 DjXRL+lrQWze91Cl/UBS9Q4POBFfL1XtyX+rHfIZ0idZv3aEDfUwfDQrMQ/FuEGi +PDMacqDoOX938dzUgQ+IbyCzGiXFMEymt4XMDj7r6So1s/jJu8sCQYQvMUZs5DT ugHqnmpjlw== -----END CERTIFICATE-----Generated at Sun Jun 14 05:23:08 2026 by rpki-client